Procedure

1. Configure the network devices.
2. Configure system parameters for the AC.
   1. Configure CAPWAP security parameters.

       

      # Upon the first login to the device or no CAPWAP security settings, you are prompted to configure CAPWAP security parameters, including the PSK used for DTLS encryption, PSK for DTLS encryption of inter-AC tunnels, the user name and password for AP login, and the global login password for the offline management VAP.

       

      

       

   2. Perform basic AC configurations.

       

      # Choose Configuration > Config Wizard > AC. The Basic AC Configuration page is displayed.

      # Set Country/Region based on actual situations. For example, set Country/Region to China. Set System time to Manual and Date and time to PC.

      

      # Click Next. The Port Configuration page is displayed.

       

   3. Configure interfaces.

       

      # Select GigabitEthernet0/0/1 and expand Batch Modify. Set Interface type to Trunk and add GigabitEthernet0/0/1 to VLAN 100 (management VLAN) and VLAN 101 (service VLAN).

      

      If the AC and APs are directly connected, set the PVID of the interfaces connected to the APs to VLAN 100 (management VLAN).

      

      # Click Apply. In the dialog box that is displayed, click OK.

      # Set Interface type of GigabitEthernet0/0/2 to Trunk and add the interface to VLAN 101 in the same way.

      # Click Next. The Network Interconnection Configuration page is displayed.

       

   4. Configure network connectivity.

       

      # Set DHCP status to ON.

      # Click Create under Interface Configuration. The Create Interface Configuration dialog box is displayed.

      # Set the IP address of VLANIF 100 to 10.23.100.1/24.

      

      # Click Create under DHCPv4 Address Pool List. Select Interface address pool and select VLANIF 100.

      

      # Click OK.

      # Set the IP address of VLANIF 101 to 10.23.101.1/24 and configure the interface address pool on VLANIF 101 in the same way. The IP address 10.23.101.2 cannot be assigned.

      

      Configure the DNS server address as required.

      # Under Static Route Table, click Create. The Create Static Route Table page is displayed.

      # Set Destination IP to 0.0.0.0, Subnet Mask to 0(0.0.0.0), and Next hop address to 10.23.101.2.

      
      

      # Click OK.

      # Click Next.

      # Click Next. The AC Source Address page is displayed.

       

   5. Configure the source address for AC.

       

      # Set AC source address to VLANIF, click the selection icon, select Vlanif100 in the dialog box that is displayed, and click the + icon to add the selected VLANIF interface to the list.

       

      

      

      From V200R021C00, DTLS encryption for CAPWAP control tunnels is enabled by default, and APs of earlier versions may fail to access the network. In this case, you can set AC-AP DTLS authentication mode to None authentication to allow APs to go online first. After the subsequent configurations are complete and the APs go online normally, disable this function. Specifically, choose Configuration > AC Config > Basic Config > AC Configuration > Advanced > CAPWAP Tunnel Setup Configuration, and deselect Allow APs to perform DTLS session with the AC in non-authentication mode.

      # Click Next. The Confirm Settings page is displayed.

       

   6. Confirm the configuration.

       

      # Confirm the configuration and click Continue With AP Online.

       

3. Configure APs to go online.
   1. Configure APs to go online.

       

      # Click Batch Import. The Batch Import page is displayed. Click  to download an AP template file to your local computer.

      
      

      # Fill in the AP template file with AP information according to the following example. To add multiple APs, fill in the file with information of the APs.

      • AP MAC: 00e0-fc76-e360
      • AP SN: 210235419610CB002287
      • AP Name: area_1
      • AP group: ap-group1

      

      • If you set AP authentication mode to MAC address authentication, the AP's MAC address is mandatory and the AP's SN is optional.
      • If you set AP authentication mode to SN authentication, the AP's SN is mandatory and the AP's MAC address is optional.

      You are advised to export the radio ID, AP channel, frequency bandwidth, and power planned on WLAN Planner to a .csv file, and then enter them in the AP template file. Set the longitude and latitude as required.

      # Click  next to Import AP File, select the AP template file, and click Import.

      # On the page that displays the template import result, click OK.

      # Click Next. The Group APs page is displayed.

      # AP group information has been added in the AP template file. Click Next. The Confirm Configurations page is displayed.

       

   2. Confirm the configuration.

       

      # Confirm the configuration and click Continue With Wireless Service Configuration.

       

4. Configure WLAN services.

    

   # Click Create. The Basic Information page is displayed.

   # Set the SSID name, forwarding mode, and service VLAN.

   
   

   # Click Next. The Security Authentication page is displayed.

   # Set Security settings to Key (applicable to personnel networks), select the AES mode, and set the key.

   

   # Click Next. The Access Control page is displayed.

   # Set Binding the AP group to ap-group1.

   # Click Finish.

    

5. Set the AP channel and power.
   1. Disable automatic channel and power calibration functions of AP radios, and manually configure the AP channel and power.

       

      

      Automatic channel and power calibration functions are enabled by default. The manual channel and power configurations take effect only when these two functions are disabled.

      # Choose Configuration > AP Config > AP Config > AP Info. The AP List page is displayed.

      # Click the ID of the AP whose channel and power need to be configured. The AP customized settings page is displayed.

      # Click  next to Radio Management. The profiles under Radio Management are displayed.

      # Click Radio 0. On the radio 0 configuration page that is displayed, disable the automatic channel and power calibration functions, and set the channel to 20 MHz channel 6 and the transmit power to 127 dBm.

      

      # The configuration of Radio 1 is similar to that of Radio 0. Disable automatic channel and power calibration functions, and set the AP channel to 20 MHz channel 149 and the transmit power to 127 dBm.

      # Click Apply. In the dialog box that is displayed, click OK.

       

6. Verify the configuration.
   1. Choose Monitoring > SSID > VAP. In VAP List, check VAP status. You can see that the status of the VAP in wlan-net is normal.
   2. The WLAN with the SSID wlan-net is available.
   3. The STA can associate with the WLAN and obtain an IP address 10.23.101.x/24, and its gateway address is 10.23.101.1.

       

      
      

       

   4. Choose Monitoring > User > User List. All online users are displayed in User List. You can use the filtering function to filter the display results. For example, click  next to SSID. Set the filtering condition, enter wlan-net, and click OK. Users connected to the SSID wlan-net are displayed. Multi-column filtering is supported to accurately query online users.